CVE-2026-28270 — Kiteworks Core has an Unrestricted Upload of File with Dangerous Type
Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks configuration allows uploading of arbitrary files without proper validation. Mali…
Published: 2026-02-27 · CVSS: 4.9 · CVSS 3.1
Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks configuration allows uploading of arbitrary files without proper validation. Malicious administrators could exploit this to upload unauthorized file types to the system. Version 9.2.0 contains a patch for the issue.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7